$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa File: 2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa (raw, json) Hash identifier: uCESU1gFSMbUrpbeFK1HrhHnma3nrOpVbo+hl8rfcho= Subject key identifier: 4C:29:5A:DA:D8:F2:66:35:19:DD:AD:3B:F6:CF:46:57:77:7C:B3:A9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EED520E4406239323148F5900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 22612 IP address blocks: 209.188.18.0/26 maxlen: 26 209.188.18.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:0e:44:06:23:93:23:14:8f:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=aa1db81c-ff1e-42b7-8fa0-a914bb9fcf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:d5:d9:25:6f:3b:c8:7f:f4:b7:cb:8f:7a: 9f:37:c0:2c:32:bf:73:d5:18:d7:17:60:35:87:ed: cd:c0:c5:d3:9c:05:3e:e2:fe:11:88:a7:ff:81:0b: 30:5e:48:e2:a1:70:fa:a5:2b:ab:e7:37:7f:c2:fa: 1c:9c:8a:a6:d3:4d:ef:21:96:61:37:5b:4a:de:31: c6:ff:92:75:9e:03:9c:e4:f9:85:75:b1:7a:f7:d6: 65:58:e9:e8:4a:48:23:0f:1a:d4:90:0e:ad:19:97: b0:a1:c8:2e:21:cf:09:3c:64:5d:1a:73:06:65:64: e7:3b:f6:3e:27:99:5d:73:4c:2b:07:62:7f:e3:1c: 67:51:09:aa:da:41:a0:9e:2c:b6:5c:3c:10:c1:32: 20:63:c1:ae:d7:46:d4:f3:6e:13:fc:4d:ae:03:90: 1f:6b:7a:6e:7d:2c:82:4a:b9:66:4c:23:45:cb:0e: 14:77:af:b3:c8:9d:c9:6f:ba:bd:04:af:f8:ad:de: 68:d6:73:0c:ec:2c:67:37:bd:ff:88:14:df:1e:7f: fa:71:f4:88:14:9b:f3:14:18:54:cf:9a:69:38:f9: 96:20:4b:e1:08:2e:fe:c9:9e:49:03:0a:b3:6e:68: fa:6d:42:51:d4:08:ac:63:ac:4b:ef:5e:53:4d:a6: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:5A:DA:D8:F2:66:35:19:DD:AD:3B:F6:CF:46:57:77:7C:B3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2995f09e-0d75-3a09-85b0-dff8f6925ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.18.0/26 209.188.18.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a0:30:4f:18:25:45:24:05:6c:4a:8a:d6:d1:db:40:9c:00: 5f:a7:af:58:33:56:b7:e5:8b:84:f8:8b:80:31:b0:7a:e3:ff: 46:67:87:c5:a1:79:9c:80:93:24:4c:66:83:85:34:98:58:3a: 66:a4:73:af:40:34:fc:01:27:41:c7:67:28:22:01:f5:f5:68: 08:29:df:20:9a:dc:c7:92:e0:14:8c:33:f1:8e:c7:28:6f:92: d0:02:49:b6:e7:ae:87:bb:21:54:7f:f1:a3:3b:f7:a0:75:27: c4:8f:82:45:69:8f:c4:cc:83:12:21:30:fe:55:27:7d:78:0b: bd:1e:a5:2a:8d:30:35:a7:be:1b:60:6c:2f:2b:9f:ac:e2:ca: c5:51:3c:78:42:72:18:78:c7:35:09:37:cd:2b:83:b0:0a:ae: c4:51:58:e9:1a:a7:57:e3:45:a4:55:83:8c:b8:2c:7b:23:7e: 0f:d6:18:4b:4e:2d:6e:a5:c9:55:7d:d0:a4:6d:43:65:d5:1b: 2a:d6:37:37:ba:fc:cd:fe:39:3b:69:83:68:8b:3d:70:22:69: f9:09:d4:83:f7:2c:a0:52:b2:b8:09:8f:b2:8d:62:31:5c:d0: 77:45:ea:c9:76:49:ab:e0:61:0e:de:b1:bb:b3:cf:80:d4:07: 93:e5:8b:19 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7tUg5EBiOTIxSPWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YWExZGI4MWMtZmYxZS00MmI3LThmYTAtYTkxNGJiOWZjZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtObV2SVvO8h/9LfLj3qfN8AsMr9z1RjXF2A1 h+3NwMXTnAU+4v4RiKf/gQswXkjioXD6pSur5zd/wvocnIqm003vIZZhN1tK3jHG /5J1ngOc5PmFdbF699ZlWOnoSkgjDxrUkA6tGZewocguIc8JPGRdGnMGZWTnO/Y+ J5ldc0wrB2J/4xxnUQmq2kGgniy2XDwQwTIgY8Gu10bU824T/E2uA5Afa3pufSyC SrlmTCNFyw4Ud6+zyJ3Jb7q9BK/4rd5o1nMM7CxnN73/iBTfHn/6cfSIFJvzFBhU z5ppOPmWIEvhCC7+yZ5JAwqzbmj6bUJR1AisY6xL715TTaYxkQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEwpWtrY8mY1Gd2tO/bPRld3fLOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMjk5NWYwOWUtMGQ3NS0z YTA5LTg1YjAtZGZmOGY2OTI1ZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUG0bwSAAMF B9G8EoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgaAwTxglRSQFbEqK1tHbQJwAX6evWDNWt+WLhPiLgDGw euP/RmeHxaF5nICTJExmg4U0mFg6ZqRzr0A0/AEnQcdnKCIB9fVoCCnfIJrcx5Lg FIwz8Y7HKG+S0AJJtueuh7shVH/xozv3oHUnxI+CRWmPxMyDEiEw/lUnfXgLvR6l Ko0wNae+G2BsLyufrOLKxVE8eEJyGHjHNQk3zSuDsAquxFFY6RqnV+NFpFWDjLgs eyN+D9YYS04tbqXJVX3QpG1DZdUbKtY3N7r8zf45O2mDaIs9cCJp+QnUg/csoFKy uAmPso1iMVzQd0XqyXZJq+BhDt6xu7PPgNQHk+WLGQ== -----END CERTIFICATE-----Generated at Wed Sep 23 16:08:44 2026 by rpki-client